THE PERSONAL DATA PROTECTION BILL,
2018

WHEREAS the right to privacy is a fundamental right and it is necessary
to protect personal data as an essential facet of informational privacy;

WHEREAS the growth of the digital economy has meant the use of data as a
critical means of communication between persons;

WHEREAS it is necessary to create a collective culture that fosters a
free and fair digital economy, respecting the informational privacy of
individuals, and ensuring empowerment, progress and innovation;

AND WHEREAS it is expedient to make provision: to protect the autonomy
of individuals in relation with their personal data, to specify where
the flow and usage of personal data is appropriate, to create a
relationship of trust between persons and entities processing their
personal data, to specify the rights of individuals whose personal data
are processed, to create a framework for implementing organisational and
technical measures in processing personal data, to lay down norms for
cross-border transfer of personal data, to ensure the accountability of
entities processing personal data, to provide remedies for unauthorised
and harmful processing, and to establish a Data Protection Authority for
overseeing processing activities;

BE IT ENACTED by Parliament in the Sixty-Ninth Year of the Republic of
India as follows: —